Security
Claims you can check
The only page on this site that loads a third-party script is /checkout (Paddle).
Requests carry no document or profile contents
apps/extension/e2e/real-integration.spec.ts
Profile values are encrypted at rest
apps/extension/test/profile-storage.test.ts
Manifest permissions stay fixed
apps/extension/test/manifest.test.ts
Tokens use local storage, never sync
apps/extension/test/auth.test.ts
The content script only handles document links
apps/extension/test/manifest.test.ts
The demo makes no external request after load
apps/web/e2e/site.spec.ts
Public security links remain reachable
apps/web/scripts/check-links.mjs
Verify it yourself
Watch the Network list stay empty
- Press F12
- Open the Network tab
- Fill a form
- The list stays empty
Network · All · Fetch/XHR
No requests recorded
Review product changes in the changelog.